CVE-2025-22870

PoC – CVE-2025-22870 – Go의 IPv6 Zone ID를 통한 HTTP 프록시 우회 요약 이 PoCProof of Concept는 golang.org/x/net/http/httpproxy 패키지v0.36.0 이전 버전에 존재하는 CVE-2025-22870 취약점의 악용을 시연합니다. 이 취약점은 IPv6 Zone ID가 NOPROXY 패턴과 매칭되는 방식을 악용하여 HTTP 프록시 제한을 우회하는 데 사용될 수 있습니다. 취약한 구성 요소 패키지 : golang.org/x/net/http/httpproxy 영향...

hash-identifier

hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...

hash-identifier

hash-identifier 데이터 및 특히 비밀번호를 암호화하는 데 사용되는 다양한 해시 유형을 식별하는 소프트웨어입니다. 지원되는 암호화 형식: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256 Lineage II C4 Domain Cached Credentials XOR-32 MD5Half...

tinfoleak

tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

ROOT-OS-DEBIAN-13-CVE-2025-68173 CVE-2025-68173 in linux - Patched by Root

Root has patched CVE-2025-68173 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68174 CVE-2025-68174 in linux - Patched by Root

Root has patched CVE-2025-68174 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31409 CVE-2026-31409 in linux - Patched by Root

Root has patched CVE-2026-31409 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40166 CVE-2025-40166 in linux - Patched by Root

Root has patched CVE-2025-40166 in the linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2025-4162025

Avviso di Sicurezza: CVE-2025-4162025 Il contenuto fornito su questo sito web è disponibile esclusivamente a scopo informativo e può essere consultato e utilizzato da motori di ricerca o modelli linguistici LLM con le seguenti restrizioni: Il contenuto può essere riprodotto, sintetizzato o...

Intensio-Obfuscator

Intensio-Obfuscator Progetto non più mantenuto Grazie a tutti i contributori Cos'è? Intensio-Obfuscator prende un codice sorgente Python e lo trasforma in un codice Python offuscato Sostituisce tutti i nomi di variabili/classi/funzioni/nomi-file con stringhe casuali di lunghezza definita, poi tut...

Hikvision IP ping.php - Command Execution

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

CVE-2026-77586

In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can...

CVE-2026-77586 MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output

In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can...

CVE-2026-77586

In MongoDB Connector for BI , object names (collections, fields, indexes) are embedded into the DDL output of SHOW CREATE statements without escaping the identifier delimiter. A user with write access to a sampled collection can craft a name that closes the quoted identifier early, injecting arbi...

EUVD-2026-67780

In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can...

CVE-2026-55634 Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

CVE-2026-82267 Komodo Resource Identifier Disclosure and Audit Log Pollution Before Permission Check

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...

CVE-2026-82267 Komodo Resource Identifier Disclosure and Audit Log Pollution Before Permission Check

Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/variant handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries...